GitHub Advisoryadvisory · PyPI

GHSA-445m-27cf-gr3x Crawl4AI SSRF vulnerability

MEDIUM Published 2025-04-18 Modified 2025-04-21 Official page ↗

Aliases: CVE-2025-28197
Ecosystem: PyPI
Packages: Crawl4AI
Severity: Moderate
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Weaknesses: CWE-918
Reviewed: 2025-04-21

Affected packages

• PyPI Crawl4AI: <= 0.4.247 (no fix yet)

Description

Crawl4AI <=0.4.247 is vulnerable to SSRF in /crawl4ai/async_dispatcher.py.

Related

Alias · CVE (1)

CVE-2025-28197 Crawl4AI <=0.4.247 is vulnerable to SSRF in /crawl4ai/async_dispatcher.py. vulnerability

Weakness · CWE (1)

CWE-918 Server-Side Request Forgery weakness

References